CVE-2014-6262

Katalog CVE

CVSS 7.5 · High EPSS 7,2%

Kerentanan Use of Externally-Controlled Format String pada zenoss core, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted third argument to the rrdtool.graph function, aka ZEN-15415, a related issue to CVE-2013-2131.

Rincian

Terbit di NVD

12 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-134: Use of Externally-Controlled Format String

EPSS (30 hari)

7,2% peluang dieksploitasi; lebih tinggi dari 94,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/oetiker/rrdtool-1.x/commit/64ed5314af1255ab6dded45f70b39cdeab5ae2ec patch · advisory pihak ketiga
• https://github.com/oetiker/rrdtool-1.x/commit/85261a013112e278c90224033f5b0592ee387786 patch · advisory pihak ketiga
• http://www.kb.cert.org/vuls/id/449452 advisory pihak ketiga · pemerintah AS
• https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing advisory pihak ketiga
• https://github.com/oetiker/rrdtool-1.x/pull/532 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/03/msg00000.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/03/msg00003.html mailing list · advisory pihak ketiga
• https://www.securityfocus.com/bid/71540 advisory pihak ketiga · vdb entry